🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.unix.shell
Article #151

Re: Shell Scipt Security

#151
From: Tom Christiansen
Date: Sat, 25 Jul 1992 13:34
40 lines
2092 bytes
From the keyboard of ian@horse.UUCP ( as in Bunny):
:Whether that be a "shell compiler" or some other mechanism I am open
:to advice. We need to protect our time and investment in this little project 
:and stop it from being copied and stolen.    

Rewrite it in inflexible C, then: lock it in stone and throw away the
key.  Now your effort is safe.  A shell compiler would buy you negligible
speed and little security, since it would still call the base programs,
which can be trivially traced.

Seriously, put a copyright notice on the top of the source.  
That's what AT&T does.

:find / -type f -print | xargs -t ls -qb 2>/dev/null | grep '\\'

No option b
usage: ls [-acdfghilqrstu1ACHLFR] name

It also has the problem of not working if someone has done this to you:

    mkdir "/tmp/etc^J"
    cd $!
    touch passed


Furthermore, you've assumed an xargs command, not supplied 
on some systems I run on.  I suggest instead this:

    #!/usr/bin/perl
    require 'find.pl';
    &find('/');
    sub wanted { /\001-\037\177-\377/ && print("-->$name<--\n"); }


--tom
-- 
    Tom Christiansen      tchrist@convex.com      convex!tchrist
I do not feel obliged to believe that the same God who has endowed us
with sense, reason, and intellect has intended us to forgo their use.
                -- Galileo Galilei
Technical Details
Message-ID: <1992Jul25.133433.13637@news.eng.convex.com>
Path: arc1-ca.pugleaf.net!sparky!uunet!cs.utexas.edu!convex!convex!tchrist
References: <24@horse.UUCP>

Show Full Headers
Complete Article Headers
Newsgroups: comp.unix.shell
Path: arc1-ca.pugleaf.net!sparky!uunet!cs.utexas.edu!convex!convex!tchrist
From: Tom Christiansen <tchrist@convex.COM>
Subject: Re: Shell Scipt Security
Message-ID: <1992Jul25.133433.13637@news.eng.convex.com>
Originator: tchrist@pixel.convex.com
Sender: usenet@news.eng.convex.com (news access account)
Nntp-Posting-Host: pixel.convex.com
Reply-To: tchrist@convex.COM (Tom Christiansen)
Organization: CONVEX Realtime Development, Colorado Springs, CO
References: <24@horse.UUCP>
Date: Sat, 25 Jul 1992 13:34:33 GMT
X-Disclaimer: This message was written by a user at CONVEX Computer
              Corp. The opinions expressed are those of the user and
              not necessarily those of CONVEX.
Lines: 40